Skip to content
OpenAdvisories

Package · Alpine

forgejo

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-24789

    Mishandling of corrupt central directory record in archive/zip

    The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file…

    Go standard library archive/zip go stdlib Debian Ubuntu Alpine Go
  • Medium 5.9
    CVE-2024-24788

    Malformed DNS message can cause infinite loop in net

    A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

    Go standard library net go stdlib Ubuntu Alpine Go
  • Medium 5.9
    CVE-2023-48795 Public exploit EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    openssh lxd erlang openssh Debian Ubuntu Alpine PyPI Go crates.io